Skip Headers
Oracle® Application Server Release Notes
10g Release 2 (10.1.2) for hp-ux PA-RISC (64-bit)
B15511-05
  Go To Documentation Library
Home
Go To Table Of Contents
Contents
Go To Index
Index

Previous
Previous
Next
Next
 

3 General Management and Security Issues

This chapter describes management and security issues associated with Oracle Application Server. It includes the following topics:

3.1 Oracle Process Manager and Notification Server Issues

This section describes Oracle Process Manager and Notification Server (OPMN) issues. It includes the following topic:

3.1.1 Error Message When Executing opmnctl Commands

When you execute either an opmnctl stopall or opmnctl startall command, the oidctl log file contains the following error message:

*** Instance Number already in use. *** 
*** Please try a different Instance number. ***

This error message is benign and can be ignored.

This error message typically appears for OracleAS Infrastructure 10g installations with Oracle Internet Directory.

3.2 Distributed Configuration Management Issues

This section describes Distributed Configuration Management (DCM) issues. It includes the following topic:

3.2.1 A Note About Port Assignments for the Oracle Application Server File-based Farm: Instance Communication Across Firewalls

You should understand the implications of the default port assignments for Distributed Configuration Management communication, in the case of environments that require inter-instance communication across a firewall.

The Oracle Universal Installer assigns the ports described inTable 3-1 by default when the instance is installed.

Table 3-1 Oracle Universal Installer Default Port Assignments

Quantity Purpose/Description

1

DCM Discovery Port. The first instance installed on a computer is assigned port 7100 for this; the second instance installed on a computer is assigned 7101, and so on. This is defined in the ORACLE_HOME/dcm/config/dcmCache.xml file, in the discoverer element (for example, <discoverer discovery-port ="7100" original-"true" xmlns=""/>

50

Range of ports for inter-instance communication: 7120 to 7179. These are defined in the ORACLE_HOME/dcm/config/dcmCache.xml file, in the port element (for example, <port lower="7120" upper="7179">.)

After installation, you will probably want to limit the number of ports open on the firewall. The actual port needs for inter-instance communication are:

  • 1 for the Oracle Enterprise Manager Application Server Control on each instance

  • 1 for the DCM daemon on each instance

  • 1 for each dcmctl client operating on each instance


If the ports in the range 7100 to 7179 were open on the firewall before installation, the instances in the farm will be able to communicate immediately after installation. Note that:

  • If you want the port assignments to be of a different numeric range from these, then, before installation, you must assign a DCM Discovery Port using the staticports.ini file, and select the Manual option during installation. (See the Oracle Application Server 10g Installation Guide, Chapter 4, section titled "Using Custom Port Numbers (the "Static Ports" Feature)" for more information.) The range of ports will then be assigned accordingly, as specified in Table 3-1.

  • After installation of all instances, configure the firewall to close the unused ports within the assigned range on each instance.

3.2.2 Cloning and Recovery Performance Issue on HP-UX

On HP-UX, the Distributed Configuration Management importArchive, cloning and recovery operation can be very slow if the archive file you are using is large. For example a 70 MB archive could take many hours to import.

To resolve this problem, download patch 4122657 from OracleMetaLink:

http://metalink.oracle.com

Refer to Readme file provided with the patch for full instructions describing how to resolve this issue.

3.3 Other Management Issues

This section describes other management issues. It includes the following topics:

3.3.1 Management of Cold Failover Cluster Middle Tiers

For Cold Failover Cluster middle tiers, administration of Oracle Ultra Search using the Oracle Ultra Search administration links cannot be completed using Oracle Enterprise Manager Application Server Control(Application Server Control). The link from Application Server Control (Portal:Portal > Ultrasearch URL) does not lead to the Administration pages. Instead you will receive a Single Sign-on error.

However, the Oracle Ultra Search administration links are accessible from the OracleAS Portal pages. To get to the Oracle Ultra Search administration links:

  1. Log-on to OracleAS Portal

    http://virtualhostname:port/pls/portal
    
    
  2. Click Administer.

  3. Click Ultra Search Administration to access the service.

3.3.2 OracleAS Disaster Recovery: Problem with Pfiles and the OracleAS Guard asgctl Instantiate Farm To Operation

Whenever a pfile is used, such as when it is required with an Oracle Application Server Cold Failover Cluster (OracleAS CFC) or when the OracleAS Administrator creates a pfile, for example, to tune the Infrastructure database and change parameters, there is a problem immediately following an OracleAS Guard asgctl instantiate farm operation when Oracle Fail Safe tries to use the pfile to try to start the ORCL instance or in any other case when the pfile is called into use to start the ORCL instance. For OracleAS CFC, Oracle Fail Safe fails to bring up the ORCL instance and generates an ORA-16033 error. In the other case, the ORCL instance fails to come up.

The problem is that during the OracleAS Guard asgctl instantiate farm operation the pfile is getting overwritten by the spfile and after this operation completes and when the pfile is called back into use it is no longer there. The workaround is to backup the pfile before running the OracleAS Guard asgctl instantiate farm operation, and immediately after this operation completes restore the pfile to its original location.

In the Oracle Application Server Disaster Recovery chapter in the Oracle Application Server 10g High Availability Guide, in the sections that show an instantiate farm operation, such as in Section 7.5.2 Standby Instantiation, just before Step 1 in the procedure to perform a standby instantiation operation, a new note should be added that states: If you are using a pfile, make a backup copy of your pfile before proceeding to perform an asgctl instantiate farm operation. Then immediately following Step 5 in this same section, another note should be added that states: Immediately after performing an asgctl instantiate farm operation, restore your pfile to its original location before performing any other tasks. The other sections in this chapter where these notes should be added and where the use of the OracleAS Guard instantiate farm operation is shown include Section 7.6.1.2.1 Site Failover Operations, Section 7.8.1.5 Instantiating the Farm at the Secondary Site, and Section 7.8.5 Reference Section: OracleAS Guard asgctl Command-line Commands where the instantiate farm to command is described.

3.3.3 OracleAS Disaster Recovery: In Some Scenarios, the DSA (OracleAS Guard) Component Does Not Get Registered with OPMN During the Oracle Application Server Installation

If, during the Oracle Application Server installation, you do not have a default shell, the DSA (OracleAS Guard) component registration with Oracle Process Manager and Notification Server (OPMN) fails. The script $ORACLE_HOME/dsa/bin/addopmn.sh, which registers the DSA component with OPMN gets run, but because there is no shell invoker (#!/bin/sh) specified at the beginning of the script, this addopmn.sh script does not get run in certain shell environments.

If you run the following OPMN command and do not see the ias-component and process-type named DSA, it means the DSA component did not get registered during the install:

> <ORACLE_HOME>/opmn/bin/opmnctl status

To workaround this problem after the installation, run the following command at the UNIX command prompt to register the DSA component with OMPN:

> /bin/sh <ORACLE_HOME>/dsa/bin/addopmn.sh

Another workaround to this problem is to put "#!/bin/sh" as the first line in the addopmn.sh script, then run the script as follows to register the DSA component with OPMN:

> <ORACLE_HOME>/dsa/bin/addopmn.sh

If you run the following OPMN command and see the ias-component and process-type named DSA, it means the DSA component is registered with OPMN.

> <ORACLE_HOME>/opmn/bin/opmnctl status

3.3.4 Globalization Support Settings May be Changed During Cloning

When you run the clone.pl script, Oracle Universal Installer creates the file index.html in the $Oracle_home\Apache\Apache\htdocs directory. As a result of the creation of this file, locale settings are overwritten.

To workaround this, rename the file to index.html.html.

3.3.5 Cloning and Undeploying OC4J Applications

On the source Oracle home during the prepare phase of the cloning process, do not attempt to undeploy OC4J applications while the prepare_clone.pl script is running.See the Oracle Application Server 10g Administrator's Guide for more information about cloning.

3.3.6 Use Trusted Certificates When Enabling SSL Between mod_oc4j and OC4J

You must use trusted certificates on both ends when enabling SSL between mod_oc4j and OC4J.

Otherwise, you will get the following error when accessing the HTTPS port:

500 Internal Server Error 

3.3.7 Welcome Pages Display in English in Cloned Installations

After cloning an installation using Oracle Universal Installer, the Welcome Pages in the cloned installation display in English, regardless of the locale selection.

To resolve this problem, perform the following steps in the cloned Oracle home:

cd $ORACLE_HOME/Apache/Apache/htdocs
mv index.html index.html.html

3.3.8 Benign Decoding Errors When Running ldapaddmt

Chapter 11, "Changing from a Test to a Production Environment," in the Oracle Application Server 10g Administrator's Guide contains steps for migrating Oracle Internet Directory data to a production environment.These steps include running the ldapaddmt command, and examining the add.log file. The add.log file may contain a "Decoding Error" message. This is benign and can be ignored.

3.3.9 Missing Files During restore_config Operation

Running restore_config may result in missing files messages such as:

Could not copy file C:\Product\OracleAS\Devkit_1129/testdir/ to 
C:\Product\OracleAS\Devkit_1129\backup_restore\cfg_bkp/2004-12-01_03-26-22.

During a restore_config operation, a temporary configuration backup is taken so that, if the restore fails, the temporary backup can be restored returning the instance to the same state as before the restore.If some files are deleted (including files/directories specified in config_misc_files.inp) before a restore operation, then, during the temporary backup, messages are displayed indicating that certain files are missing. These error/warning messages should be ignored since the missing files are restored as part of the restore_config operation.

3.3.10 DCM Failure Following Patch Application

Following application of RDBMS 10.1.0.4 patchset (patch number 4163362) to the ORACLE_HOME of Oracle Application Server 10g, DCM will fail with an ADM-100992 error message. There is a DCM compatibility problem with the newer XDK that is introduced when installing the patchset or patch. The failure may not manifest itself until some time later after patchset or patch application.

To correct this issue:

  • Create a DCM archive and export it on the file system for backup.

  • Obtain and apply the patch for Bug:4370593 to your Oracle Application Server installation.

    Download the patch from Oracle Metalink (http://metalink.oracle.com). The Automatic Release Update (ARU) patch number is 7485905.

3.3.11 Mixed Version (9.0.4 and 10.1.2) Deployment of Oracle Business Intelligence Discoverer, OracleAS Reports Services, and OracleAS Portal

In Oracle Application Server 10g (10.1.2), there is currently not an installation type that enables deployment of OracleAS Portal with OracleAS Reports Services and Oracle Business Intelligence Discoverer (OracleBI Discoverer). The following sections describe how to enable this type of deployment with either a 9.0.4 or 10.1.2 OracleAS Infrastructure 10g:

3.3.11.1 Deployment of OracleAS Portal and OracleAS Reports Services (9.0.4) with OracleBI Discoverer (10.1.2)

To enable deployment of OracleAS Portal and OracleAS Reports Services (9.0.4) with OracleBI Discoverer (10.1.2) (shown in Figure 3-1), perform the following steps:

  1. Install and configure OracleAS Infrastructure 10g Identity Management plus OracleAS Metadata Repository on Host 1.

  2. Install and configure the Oracle Application Server 10g (9.0.4) Business Intelligence and Forms install type, with OracleAS Portal and OracleAS Reports Services selected, on Host 2.

  3. Install and configure the version of OracleBI Discoverer (10.1.2), available from the Oracle Application Server 10g Release 2 (10.1.2.0.0) Business Intelligence installation disc, on Host 3.

    Refer to the Oracle Business Intelligence Installation Guide and the Oracle Business Intelligence Discoverer Configuration Guide for information on installation and configuration of the OracleBI Discoverer instance.

  4. Run the upgradeMR.sh script, located in ORACLE_HOME/discoverer/util, to upgrade the discoverer5 schema. The upgradeMR.sh script only upgrades the discoverer5 schema.

  5. Associate the instance on Host 3 to the OracleAS Metadata Repository on Host 1.

    Refer to the Oracle Business Intelligence Discoverer Configuration Guide for information on how to associate the Business Intelligence instance.

Figure 3-1 Deployment of OracleAS Portal and OracleAS Reports Services (9.0.4) with OracleAS Discoverer (10.1.2)

Description of Figure 3-1  follows
Description of "Figure 3-1 Deployment of OracleAS Portal and OracleAS Reports Services (9.0.4) with OracleAS Discoverer (10.1.2)"

3.3.11.2 Deployment of OracleAS Reports Services (9.0.4) with OracleAS Portal and OracleBI Discoverer (10.1.2)

To enable deployment of OracleAS Reports Services (9.0.4) with OracleAS Portal and OracleBI Discoverer (10.1.2) (shown in Figure 3-2), perform the following steps:

  1. Install and configure Oracle Application Server 10g (9.0.4) Infrastructure Identity Management plus OracleAS Metadata Repository on Host 1.

  2. Following installation of the Identity Management instance, upgrade the version from 9.0.4 to 10.1.2.

    For information on performing an upgrade refer to the Oracle Application Server Upgrade and Compatibility Guide.

  3. Install and configure OracleAS Portal (10.1.2) on Host 2.

  4. Install and configure OracleBI Discoverer (10.1.2) on Host 3.

    Refer to the Oracle Business Intelligence Installation Guide and the Oracle Business Intelligence Discoverer Configuration Guide for information on installation and configuration of the OracleBI Discoverer instance.

  5. Associate the instance on Host 3 with the infrastructure installation on Host 1.

  6. Install and configure OracleAS Reports Services (9.0.4) on Host 4.

After you complete these steps, the OracleAS Metadata Repository is upgraded from 9.0.4 to 10.1.2. The OracleAS Portal schema contains all the portlets, including the OracleAS Reports Services portlets.

Figure 3-2 Deployment of OracleAS Reports Services (9.0.4) with OracleAS Portal and OracleAS Discoverer (10.1.2)

Description of Figure 3-2  follows
Description of "Figure 3-2 Deployment of OracleAS Reports Services (9.0.4) with OracleAS Portal and OracleAS Discoverer (10.1.2)"

3.4 Additional Troubleshooting Topics

This section contains the following troubleshooting topic:

3.4.1 OracleAS Guard "instantiate farm" Command Requires DNS Hostname, Not Alias

Problem

If you run the "instantiate farm" command with a hostname alias as the parameter, you get a java.lang.OutOfMemory error. For example, if you have a host named host1, and your /etc/hosts file contains this line:

166.166.166.167 host1.us.oracle.com infra

then you can refer to host1 using "infra" because "infra" is an alias for host1.

However, you cannot use infra (which is an alias) as the parameter value to "instantiate farm". You must use host1 (the DNS hostname) instead.

ASGCTL> instantiate farm to infra      - Results in java.lang.OutOfMemory error.

ASGCTL> instantiate farm to host1      - OK.

Solution

Use the DNS hostname as the parameter for the "instantiate farm" command.

3.5 Documentation Errata

This section describes documentation errata. It includes the following topic:

3.5.1 Missing Element in Common Configuration Example

Example 3-1 in the Oracle Process Manager and Notification Server Administrator's Guide is missing the following sub-element for the ipaddr element:

   local="ip"

Required: true
Default: none
Valid Values: IP address (in ###.###.###.### format) or host name to which ONS will bind its local port. IP address or host name to which ONS will bind its local port. All local OPMN requests are routed through the local port, and all local applications connect to ONS through the local port to send and receive notifications.

3.5.2 Incomplete Sentence

Section 4.5, "Oracle HTTP Server 2" of the Oracle Process Manager and Notification Server Administrator's Guide contains the following incomplete sentence:

"Oracle does not support the for each child MPM."

The sentence should be:

"Oracle does not support the perchild MPM."

3.5.3 Reference to Nonexistent Files

Section 3.2 of the Oracle Application Server 10g Administrator's Guide refers to scripts on an OracleAS RepCA and Utilities CD-ROM. This is incorrect.

Because of improvements to OPMN, there is no longer any need for the scripts and they are not shipped with Oracle Application Server 10g.

3.5.4 Incorrect Archivelog Mode Instructions

In Section 19.2.2, "Enabling ARCHIVELOG Mode" of the Oracle Application Server 10g Administrator's Guide, in Step 1. of "To enable ARCHIVELOG mode:", the following command example:

alter system set log_archive_dest='xxx' scope=spfile;

should be:

alter system set log_archive_dest_n = "location=<your_desired_backup_directory>"  scope=spfile;

where n is a number between 1 and 10 and location is your backup directory location.

3.5.5 Incorrect Figure Reference in Oracle Application Server 10g High Availability Guide

The following two incorrect figure references occur in Section 5.3.2.3 OracleAS Cold Failover Cluster (Identity Management) of the Oracle Application Server 10g High Availability Guide:

  • In the following paragraph, the reference to Figure 5-8 should be in the last sentence of the paragraph:

    "This database can be a Real Application Clusters database that is already installed in the hardware cluster (shown in Figure 5-8). Alternatively, the database can be in a cold failover cluster configuration."

    Should be:

    "This database can be a Real Application Clusters database that is already installed in the hardware cluster. Alternatively, the database can be in a cold failover cluster configuration (shown in Figure 5-8)."

  • The following paragraph is incorrect and should be ignored:

    "Both Oracle Identity Management and OracleAS Metadata Repository are active in Node 1. In Node 2, all components are passive, on standby, unless the database that contains the OracleAS Metadata Repository is a Real Application Clusters database. In this case, the database instance is active on Node 2."